Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
File: wPQvc_8rzEiFsSAL0C7n4p9gjis.mft (raw, json)
Hash identifier: oSd5hBeOofNmq53fsGIZsPP6Bq5ZkJJc++B3/ksSbms=
Subject key identifier: E8:1E:A9:12:73:5E:25:CC:CB:C3:B1:92:13:65:8A:A0:26:75:A8:2D
Authority key identifier: C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B
Certificate issuer: /CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b
Certificate serial: 0199FC58F29509A3A3BE1065592ADE464850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
Manifest number: 015B
Signing time: Sun 19 Oct 2025 12:01:51 +0000
Manifest this update: Sun 19 Oct 2025 12:01:51 +0000
Manifest next update: Mon 20 Oct 2025 12:01:51 +0000
Files and hashes: 1: DhYlOELQmejsuqE0q-lFm-NVMP0.roa (hash: mf0P0l64vNrzlnAnRIlTkqO53r1pyoZwPlURmjISdFU=)
2: S0h9COCL9yDPAz3dul4Z5VK_88Q.roa (hash: xAF8HzsYzOEotQ+1gvdFYGccAU/IelrIejunqeu7D98=)
3: wPQvc_8rzEiFsSAL0C7n4p9gjis.crl (hash: 5SHlNUaT9JpfIEMnhIp8EaA2DBBuG3NnVSSq8aDLvkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f2:95:09:a3:a3:be:10:65:59:2a:de:46:48:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b
Validity
Not Before: Oct 19 12:01:51 2025 GMT
Not After : Oct 20 12:01:51 2025 GMT
Subject: CN=e81ea912735e25cccbc3b19213658aa02675a82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:17:28:dc:16:b8:9f:24:14:bc:e1:98:3f:
bd:5a:a2:b2:ea:de:78:1f:df:ef:3e:54:f2:ad:7c:
9a:14:66:8e:81:4e:9c:81:ae:9a:f0:f9:ee:a4:77:
2b:49:64:58:e3:ae:3f:6e:9d:9b:69:22:fd:70:84:
e2:30:84:71:96:d1:c1:6c:0f:a1:a5:e6:cf:e4:6d:
a5:a8:57:f3:69:f0:95:dc:de:7d:9c:ad:67:54:d5:
e5:e2:2e:00:db:29:c5:09:85:9a:a3:d8:1a:e0:f0:
cc:92:cf:4e:18:9c:e0:9b:37:e6:69:62:ac:ca:82:
21:90:23:17:3e:d3:fd:2a:4d:4b:1a:96:a0:df:87:
d2:07:54:ec:31:07:51:fd:e4:0e:be:85:15:4e:5b:
de:70:5c:39:11:37:7c:3d:55:dd:36:56:7c:28:92:
3a:2e:50:02:4e:ae:b7:2e:89:f8:08:93:16:cc:0e:
c3:b2:43:ec:fa:2e:e5:95:0e:89:23:7f:a6:45:a6:
d6:48:be:72:d8:a7:31:f4:b2:93:9a:eb:c1:78:18:
8a:87:fe:de:35:54:59:32:77:a7:d1:0a:2d:ed:82:
fb:d6:44:80:7a:1e:2c:75:8e:a3:98:a3:8f:30:dd:
c0:46:52:5a:63:3c:b7:7b:b8:cb:b7:17:60:1f:28:
37:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1E:A9:12:73:5E:25:CC:CB:C3:B1:92:13:65:8A:A0:26:75:A8:2D
X509v3 Authority Key Identifier:
keyid:C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8b:af:62:49:d4:d8:4e:32:89:13:4f:80:eb:5c:2d:c3:d6:
bd:1d:32:ad:7b:70:36:85:07:58:ca:15:b6:72:d7:1c:e8:b2:
cd:b6:14:49:7d:5e:d2:7c:ff:9f:96:ae:9c:56:b9:cb:54:a6:
63:21:ef:8f:ce:0e:4b:e6:38:70:1c:5b:b4:9e:34:b3:ce:45:
4a:31:9b:64:8f:6f:91:ba:72:5f:58:81:ac:c7:a7:68:e3:70:
f8:ed:e9:70:87:2b:18:96:1a:78:91:2d:b2:39:be:a5:14:90:
c4:cf:27:da:0a:3c:2c:78:43:df:11:9e:77:85:e9:ce:3b:6a:
62:8e:aa:f4:6d:cc:d2:87:d5:58:f2:43:41:81:61:e5:a3:23:
a2:12:42:4d:85:c5:65:6d:4e:bc:b3:6a:3c:db:9d:42:65:e3:
a4:d4:53:58:12:58:1c:e3:4b:15:77:5c:64:f9:04:25:cf:74:
5a:9a:c5:52:57:42:8c:7b:ff:65:39:5d:10:5d:f3:28:0b:46:
aa:b5:00:4f:d3:01:05:b4:ca:0b:3d:68:8a:67:d4:fc:32:ba:
e2:2f:bf:a7:f2:25:d0:9f:ea:b7:a5:f5:21:58:17:a0:3c:af:
5f:54:f4:cb:25:3e:f6:96:50:4c:b7:4f:e9:21:90:67:b0:29:
f3:25:6b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:44 2025 by rpki-client